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Specification 



1. Title of the Invention : IC CARD TESTING SYSTEM 

2 . Claims 

1- An IC card testing system, characterized by the fact 
that in an IC card that has a processor, a nonvolatile memory for 
storing programs of the processor, and a volatile memory which 
stores data and is not backed up by an internal power source or a 
memory which can be volatilized and exchanges data with an 
external device, it is equipped with a detection means that 
detects a stored information showing the storage of a processing 
program for confirming operations from the information being sent 
from the above-mentioned external device, a program writing means 
that stores the information of the above-mentioned processing 
program sent in accordance with the detection of the above- 
mentioned stored information by the detection means into the 
above-mentioned volatile memory or the above-mentioned memory 
which can be volatilized, and a program implementation means that 
implements an instruction being sent from the above-mentioned 
external device by starting the above-mentioned processing 
program when the instruction is an instruction for implementing 
the above-mentioned processing program. 

2- The IC card testing system of Claim 1, characterized by 
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the fact that the memory which can volatile data is an EEPROM; 
and its stored contents are erased after confirming the 
operations . 

3 - Detailed explanation of the invention 
(Industrial application field) 

The present invention pertains to an IC card testing system. 
Specif ically, the present invention pertains to an improvement of 
an IC card testing system that does not leave a test program in 
an IC card. 
(Prior art) 

Credit systems in product transactions, or bank 
payment/deposit systems for exchanging cashes, or various kinds 
of exact calculation systems in hospitals or employee restaurants 
are put into practice as systems using IC cards. In these 
systems using the IC cards, however in the systems using the IC 
cards, its illegal use causes a big program. 

The IC card is usually built with microprocessor, memory, 
and interface for exchanging data with external devices. For 
example, it is mounted in a host computer or an IC card 
reader /writer as one of the external devices, and a command group 
transmitted from the external device is decoded, and in 
accordance with the operation programs stored in the memory, the 
access of the memory such as writing, reading, and erasing of 
data is implemented. The result is sent back as a response to 
the command to the external storage device, and in this sequence. 



the data are exchanged with the external device. 

In such a conventional IC card, testing for confirming the 
operations of the IC card is required before issuing the card. A 
program for confirming the operations (hereinafter, referred as 
an operation test program) is written along with various kinds of 
operation programs in a mask ROM in a microcomputer. 
(Problems to be solved by the invention) 

Accordingly, when the IC cards are used or operated, the 
operation test program remains in the IC card. As a result, data 
can be read out or written into the IC card by the operation test 
program. Therefore, the conventional IC card is deficient for 
its secrecy and reliability. 

Also, since the operation test program which is not required 
for using and operating exists in a nonvolatile memory in a 
microcomputer, the storage area of general operation programs 
becomes an area other than that, and its length is restricted. 
(Means to solve the problems) 

The means in the IC card testing system of the present 
invention for achieving such a purpose is characterized by the 
fact that in an IC card that has a processor, a nonvolatile 
memory for storing programs of the processor, and a volatile 
memory which stores data and is not backed up by an internal 
power source or a memory which can be volatilized and exchanges 
data with an external device, it is equipped with a detection 
means that detects a stored information showing the storage of a 
processing program for confirming operations from the information 
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being sent from the external device, a program writing means that 
stores the information of the processing program sent in 
accordance with the detection of the stored information by the 
detection means into the volatile memory or the memory which can 
be volatilized, and a program implementation means that 
implements an instruction being sent from the external device by 
starting the processing program when the instruction is an 
instruction for implementing the processing program. 
(Operation) 

Thus, whether or not the information being transmitted from 
an external device is an operation test program of an IC card is 
detected by the detection means, and if it is detected, the 
information of the operation test program is written into the 
volatile memory or the memory, which can be volatilized, by the 
test program writing means. Then, after finishing the writing, 
since the program is implemented by the program implementation 
means, the operations of the IC card can be tested. At the same 
time, after confirming the operations, if the IC card is 
discharged from the testing device, the operation test program is 
erased in the volatile memory, and the data related to the 
operation test program can be erased in the memory that can 
volatilize the data. 

As a result, when the IC card is used or operated, the 
operation test program does not exist in the IC card, and the 
space of the volatile memory or the space of the memory which can 
volatilize data can be utilized as a work area of the operation 
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programs. Therefore, the IC card with excellent secrecy and 
reliability can be issued. 
( Application example) 

Next, an application example of the present invention is 
explained in detail referring to the figures . 

Figure 1 is a block diagram showing the internal 
constitution of an IC card showing an application example of the 
present invention. Figure 2 is an illustrative diagram showing a 

memory map in the IC card in a testing operation. Figure 3 is a /3 
flow chart showing the test processing. 

In Figure 1, 10 is an IC card that is mounted in an IC card 
reader/writer (or a host computer) and exchanges data with the IC 
card reader/writer, and 8 is its information processing part 
(microprocessor, MPU) . Then, control programs or basic 
processing programs or operation programs of the MPU 8 are stored 
in a ROM (including mask ROM, PROM, and EEPROM) 4. 

In a normal operation, the MPU 8 implements a prescribed 
processing in accordance with the programs stored in the ROM 4, 
data transferred from an external device or readout data or 
result data are temporarily stored in the RAM 5 as a volatile 
memory, and the data are exchanged with the external devices such 
as IC card reader/writer . Also, in this case, there is no 
internal power source, and power sources of RAM 5, etc., are 
provided from the external devices. Therefore, the RAM 5 is not 
backed up by an internal power source. 
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Here, the MPU 8 consists of identification means 2, 
arithmetic processing part 3, test program writing means 6, and 
test program implementation means 7 as its functional blocks. 
Then, part or all of these constituent elements may be realized 
by circuits as the hardware or may also be realized by 
implementing the corresponding each processing program in the RAM 
5 or ROM 4. Furthermore, they may also be realized by the 
combination of the hardware and the software. 

Accordingly, the above-mentioned constitution and its 
operation as the characteristic of the present invention are 
mainly explained according to the processing flow of Figure 3. 

An input and output device 1 is an interface with an 
external device, and at step (1) of Figure 3, the input and 
output device 1 receives a data block transmitted from a testing 
device (here, the IC card 10 is mounted in a testing device 
corresponding to the IC card reader/writer) and transmitted to 
the identification means 2- In the data block, a mode 
identification information part for identifying the mode (the 
kind of processing) being processed by itself exists, and at the 
next step (2), it is identified by the identification means 2. 
In other words, the mode identification information showing its 
own mode in the data block is decoded, or its matching is 
detected, so that it is identified that the operation test 
program is written or the operation test program is implemented 
or a general processing program is implemented- Also, as a 
transmission format of the data block, for example, initial start 
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code, command code or response code, mode identification 
information, transmission data, and final end code are arranged. 
In the transmission data block from the testing device (IC card 
reader/writer) , the command code is inserted into the second 
position, and as response from the IC card 2, the response code 
is inserted into the second position. 

On the other hand, in the above-mentioned identification, if 
it is discriminated that the mode identification information of 
the data block being transmitted from the testing device (IC card 
reader/writer) shows the storage of the operation test program, 
the test program writing means 6 is started by the identification 
means 2. Accordingly, as shown at step (3), the test program 
writing means 6 receives the data existing in the data block 
transmitted from the testing device via the identification means 
2 and sequentially writes the data into an operation test program 
area 51 of the address space allocated in the RAM 5 shown in 
Figure 2. 

On the other hand, in the decision at the above-mentioned 
step (2), if it is decided that the contents shown in the mode 
identification information do not correspond to the operation 
test program, the flow proceeds to a of step (3), and the 
processing is finished by implementing the operation program 
designated in advance. Also, the operation program in this case 
may be designated by the operation program of the processing 
corresponding to the result identified by the identification 
means 2. 
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If writing of the operation test program is finished, an 
operation test program start instruction transmitted from the 
testing device is transferred from the identification means 2 to /4 
the arithmetic processing part 3 at step (4), and the arithmetic 
processing part 3 decodes it and starts the test program 
implementation means 7. Accordingly, the operation test program 
written in the RAM 5 is implemented by the test program 
implementation means 7. Then, according to the instruction from 
the testing device, the basic operations of the IC card 10 about 
the transmission and reception and the memory access of the IC 
card such as data writing into the RAM 5 and the ROM 4 (EEPROM or 
when part of it is EEPROM) , readout, erasure, and data 
transmission to the outside are confirmed . 

If the test item of such one operation confirmation is 
finished, whether or not the operation confirmation is finished 
is decided at step (5) by the test program implementation means 
7, and if the operation confirmation is not finished, the flow 
returns to step (4). An instruction from the testing device is 
received, and the next test operation is confirmed. Then, such a 
processing is repeated. 

The IC card of which the operations have been confirmed in 
this manner is then discharged from the testing device. If the 
IC card 10 does not have a backup power source, the operation 
test program in the RAM 5 is simultaneously erased at that time. 

Thus, only when the IC card operations are confirmed by card 
maker, etc., the operation test program exists in the IC card. 
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and otherwise, it does not exist. For this reason, when the IC 
card is used or operated, an illegal use of readout, write, etc., 
of data in the IC card by utilizing the operation test program 
remaining in the card is prevented. 

Also, in the above-mentioned case, in case part or all of 
each constituent element of the identification means 2, 
arithmetic processing part 3, test program writing means 6, and 
test program implementation means 7 are stored as programs in the 
RAM 5, the programs corresponding to these functions are stored 
in the RAM 5 according to the processing program of the ROM 4 
prior to the above-mentioned processing. 

Figure 2 shows a memory map in the IC card when the 
operations are confirmed. An operation test program input from 
the outside is written into a specific allocated area 51 in the 
RAM 5 and implemented, however when the card is used or operated 
after the operation confirmation, the RAM space of the area 51 is 
utilized as a work area of operation programs. 

Here, 52 is a work area left to confirm the operations of 
the operation test program, and 53 and 54 are a data area in the 
address space allocated to the ROM 4 and a storage area of the 
operation programs . 

As explained above, in the application example, the RAM is 
used as a volatile memory, however needless to say, an EEPROM 
which can be volatilized may also be used. Also, in case the 
EEPROM is used, the contents of the area into which the operation 
test program is written are erased from the rear. 
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Also, in this application example, the mode identification 
information is put into the data block, and whether or not the 
operation test program is stored is identified by the mode 
identification means. However, it may be simply a means that can 
detect it from the transmitted information and is not limited to 
the mode identification means - 

In this application example, the type in which commands and 
data are inserted into the data block and transmitted is 
mentioned, however needless to say, the commands and the data may 
also be independently transmitted . 
(Effects of the invention) 

As explained above, according to the present invention, 
whether or not the information being transmitted from an external 
device is an operation test program of an IC card is detected by 
the detection means, and if it is detected, the information of 
the operation test program is written into the volatile memory or 
the memory, which can be volatilized, by the test program writing 
means- Then, after finishing the writing, since the program is 
implemented by the program implementation means, the operations 
of the IC card can be tested. At the same time, after confirming 
the operations, if the IC card is discharged from the testing 
device, the operation test program is erased in the volatile 
memory, and the data related to the operation test program can be 
erased in the memory that can volatilize the data. 

As a result, when the IC card is used or operated, the 
operation test program does not exist in the IC card, and the 
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space of the volatile memory or the space of the memory which can 
volatilize data can be utilized as a work area of the operation 
programs. Therefore, the IC card with excellent secrecy and 
reliability can be issued. 

4 . Brief description of the figures 

Figure 1 is a block diagram showing the internal 
constitution of an IC card which is an application example of the 
present invention. Figure 2 is an illustrative diagram showing a 
memory map in the IC card at a time of a test operation. Figure 
3 is a flow chart showing the test processing . 

1 Input and output device 

2 Identification means 

3 Processing device 

4 ROM 

5 RAM 

6 Test program writing means 

7 Test program implementation means 

8 Information processing part 
10 IC card 
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Figures 1-3. 




Figure 1: 

Input and output device 

Identification means 

Processing device 

Test program writing means 

Test program implementation means 
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Figure 2: 

51 Operation test program area 

52 Program work area 

53 Data area 

54 Operation program area 

Figure 3: 
A. Start 
B- End 

(1) Data reception 

(2) Operation test program ? 

(3) Writing of a program into the RAM 

(3) a Operation program implementation 

(4) Program implementation 

(5) Operation confirmation end ? 
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